Privacy Policy

This Privacy Policy describes how RevenueRacoon, Inc. ("RevenueRacoon," "we," or "us") collects, uses, and protects personal information when you use our websites, applications, and simulation services (the "Service").

1. Information We Collect

• Account information: name, email address, authentication identifiers, and organization.
• Customer Content: project descriptions, simulation inputs, uploaded files, and persona configurations you provide.
• Usage data: log data, device and browser information, feature usage, and performance telemetry.
• Billing data: handled by our payment processor; we do not store full payment card numbers.

2. How We Use Information

• To provide, operate, secure, and improve the Service.
• To generate simulations and outputs in response to your inputs.
• To prevent fraud, abuse, and security incidents.
• To communicate with you about the Service.
• To comply with legal obligations and enforce our Terms.

3. PII Handling and AI Model Providers

We strip or redact personally identifiable information from simulation inputs prior to transmission to third-party model providers where technically feasible. We do not use Customer Content to train foundation models. Data sent to LLM providers is transmitted under zero-data-retention contractual terms where supported by the provider.

4. Sharing

We share information with sub-processors, including cloud infrastructure, LLM routing, analytics, and email delivery, solely to operate the Service and under contractual data protection obligations. We do not sell personal information.

5. Compliance Posture

RevenueRacoon is not currently SOC 2 certified and not GDPR or ISO 27001 certified. We operate under security and privacy practices aligned with GDPR and CCPA/CPRA principles, including data minimization, purpose limitation, access controls, encryption in transit and at rest, and PII stripping at the simulation boundary. Formal certification is on our roadmap; current posture will be updated on this page as it evolves.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to processing or withdraw consent. Account holders can exercise the two most common rights directly from the membership page: download a JSON bundle of every row we store about you (portability), or permanently delete your account (erasure). For all other requests, or if you are unable to access your account, email privacy@revenueracoon.com. California residents may also exercise CCPA/CPRA rights, including the right to opt out of sale or sharing.

7. International Transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

8. Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Upon account termination, Customer Content is deleted from production systems within 30 days, subject to backup retention up to 90 days.

9. Security

We maintain administrative, physical, and technical safeguards designed to protect personal information. No method of transmission or storage is completely secure. Security incident notification is provided without undue delay and as required by applicable law.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

11. Changes

We may update this Policy from time to time. For material changes, we will provide notice by email or in-app. Continued use after the effective date constitutes acceptance.

12. Contact

Questions about this Policy: privacy@revenueracoon.com.